$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json) Hash identifier: hat8DaZAaQae34U0/sZjToHqg35OiDwY3fyQOfuN1wU= Subject key identifier: 09:84:59:54:15:6B:76:44:D0:3A:66:F2:1B:5F:B1:50:D5:AF:5F:73 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FC9FBD3EA6429FE7FC2251520 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa Signing time: Tue 10 Nov 2026 02:00:13 +0000 ROA not before: Tue 10 Nov 2026 02:00:13 +0000 ROA not after: Mon 08 Feb 2027 02:00:13 +0000 asID: 33392 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c9:fb:d3:ea:64:29:fe:7f:c2:25:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 10 02:00:13 2026 GMT Not After : Feb 8 02:00:13 2027 GMT Subject: CN=bafffa7f-d613-498a-a894-425c1d1d09ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:69:a8:45:01:b2:10:02:f1:27:52:cc:e1: 31:be:23:6c:c9:e2:c5:55:71:99:04:ee:b7:e7:45: b9:19:d3:66:d7:e0:e8:83:06:4e:3f:2b:32:16:a7: 1d:28:f5:ac:20:27:66:61:1c:cc:9f:e3:58:ae:22: e8:c3:ad:71:48:83:ae:b9:e0:53:9a:3a:13:af:1f: c3:21:fd:48:61:c1:19:b2:63:ac:8e:26:b3:6d:92: 56:1e:08:b7:31:63:29:5c:ac:fe:f4:ab:a2:92:64: 20:93:21:53:df:a3:46:79:ef:f7:16:4f:1c:1d:f4: 62:50:d5:5a:45:f1:db:8e:7e:db:24:00:8d:f7:a3: fb:e0:24:87:4d:54:82:b8:ad:ac:83:97:38:07:30: 6f:86:3b:2a:a7:9d:b9:a9:7b:fe:ae:9a:56:9d:aa: b6:ee:1f:08:a0:4c:b3:41:ab:de:5a:d7:21:d7:ab: 0e:16:df:4e:cb:39:0d:fc:75:22:56:62:00:48:49: f9:9e:d5:af:4e:22:29:26:2e:73:b2:c7:66:c3:59: 92:bb:a5:33:c2:6f:b4:67:64:39:2a:0f:0f:1b:4d: dd:d4:34:74:9c:d9:c2:6a:f1:5d:4a:06:0b:79:a2: 58:c7:b2:7f:72:f1:92:a5:96:3d:54:f8:d0:74:91: 67:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:84:59:54:15:6B:76:44:D0:3A:66:F2:1B:5F:B1:50:D5:AF:5F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0e:b9:08:37:c9:77:b2:1d:61:25:b4:3b:ce:2e:9d:80:06: e2:02:6c:70:0f:b0:ef:33:1c:4d:d1:55:67:d5:ad:c8:09:bc: 60:2e:15:46:3d:5f:99:1d:b7:e1:55:5a:1a:80:91:6d:f6:b4: 6b:09:08:03:40:5e:6b:39:ca:b6:8c:a3:b7:21:e8:b2:df:89: 4b:a7:aa:e7:73:f5:6f:8e:d2:34:d7:a8:0b:1a:1b:c2:6a:7f: 5a:b5:39:26:78:92:08:e1:58:65:c7:49:c9:a2:e7:cb:d2:2f: 1f:98:80:6f:5e:01:31:33:e3:e5:f6:14:4b:6d:90:64:70:9a: 87:84:b5:09:17:ab:fc:43:ce:ce:7c:57:1d:6c:22:b2:50:a2: b8:8f:86:53:5e:3f:bc:fd:3e:57:07:46:ba:d7:92:29:19:b6: 1c:4e:b4:ed:95:32:51:45:14:cd:12:24:67:b7:dc:5a:84:d7: b8:68:bd:e4:ec:13:76:b1:ef:56:9b:58:43:f1:77:33:78:66: 90:d2:08:e8:b3:1c:18:d9:7d:e4:20:c0:48:b1:90:89:d6:5a: d3:5c:05:6d:2a:7e:a6:cb:95:a8:ba:2a:34:dd:dc:e6:3b:0c: e6:6f:f7:1a:16:ea:b8:a6:19:95:c1:d8:36:93:3e:83:6e:58: 63:ae:8f:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/J+9PqZCn+f8IlFSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTExMDAyMDAxM1oXDTI3MDIwODAyMDAxM1owLzEtMCsGA1UEAxMk YmFmZmZhN2YtZDYxMy00OThhLWE4OTQtNDI1YzFkMWQwOWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgVpqEUBshAC8SdSzOExviNsyeLFVXGZBO63 50W5GdNm1+DogwZOPysyFqcdKPWsICdmYRzMn+NYriLow61xSIOuueBTmjoTrx/D If1IYcEZsmOsjiazbZJWHgi3MWMpXKz+9KuikmQgkyFT36NGee/3Fk8cHfRiUNVa RfHbjn7bJACN96P74CSHTVSCuK2sg5c4BzBvhjsqp525qXv+rppWnaq27h8IoEyz QaveWtch16sOFt9OyzkN/HUiVmIASEn5ntWvTiIpJi5zssdmw1mSu6Uzwm+0Z2Q5 Kg8PG03d1DR0nNnCavFdSgYLeaJYx7J/cvGSpZY9VPjQdJFn/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmEWVQVa3ZE0Dpm8htfsVDVr19zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDEyZjIxYmQtOGU4ZS0z MmQ3LThhN2ItMzczOGYzOGMzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4OuQg3yXeyHWEltDvOLp2ABuICbHAPsO8zHE3RVWfVrcgJvGAuFUY9 X5kdt+FVWhqAkW32tGsJCANAXms5yraMo7ch6LLfiUunqudz9W+O0jTXqAsaG8Jq f1q1OSZ4kgjhWGXHScmi58vSLx+YgG9eATEz4+X2FEttkGRwmoeEtQkXq/xDzs58 Vx1sIrJQoriPhlNeP7z9PlcHRrrXkikZthxOtO2VMlFFFM0SJGe33FqE17hoveTs E3ax71abWEPxdzN4ZpDSCOizHBjZfeQgwEixkInWWtNcBW0qfqbLlai6KjTd3OY7 DOZv9xoW6rimGZXB2DaTPoNuWGOuj3Q= -----END CERTIFICATE-----Generated at Sun Nov 15 17:05:18 2026 by rpki-client